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Abstract 

A fragment of second-order lambda calculus (System F) is defined 
that characterizes the elementary recursive functions. Type quantifi- 
cation is restricted to be non-interleaved and stratified, i.e., the types 
are assigned levels, and a quantified variable can only be instantiated 
by a type of smaller level, with a slightly liberalized treatment of the 
level zero. 

1 Introduction and Related Work 

Machine-independent characterizations of computational complexity classes 
are at the core of the research area called Implicit Computational Com- 
plexity which has received a lot of attention recently. The goal is to give 
natural descriptions of these classes by conceptual means, mostly derived 
from mathematical logic. In particular it is desirable to go without any 
expUcit mention of bounds or ad hoc initial functions. 

The second-order, or polymorphic lambda calculus (System F) [12] 
provides a particularly natural framework for this purpose, as all data-types, 
such as natural numbers, binary words or trees, can be encoded therein 
without the use of constructors or initial functions. Unfortunately, full 
system F has a computational strength far beyond anything reasonable in 
this context: all functions provably total in second-order arithmetic can be 
defined. 

Recently there have been approaches to define fragments of system F 
with a weaker computational strength. Altenkirch and Coquand [1 pro- 
posed a fragment characterizing the functions provably recursive in Peano 
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Arithmetic by restricting type abstraction to first-order types in a single 
variable. Earlier, Leivant has used stratification of type abstraction to 
obtain a fragment characterizing the fourth level (£4 of the Grzegorczyk 
hierarchy [7j. 

Here we give a characterization of the third level (£3 of the Grzegorczyk 
hierarchy, that is, the Kalmar elementary recursive functions. In order to 
achieve this, we use a stratification of type abstractions into only two levels. 
This alone would give a system in which all definable functions are elemen- 
tary recursive. However, the class would presumably not be exhausted, as, 
for example, subtraction seems to be undefinable. 

Therefore we use a primitive product type former and allow a quanti- 
fied variable of the lowest level to be instantiated by a finite product of 
itself. Note that product types are definable in system F, however using an 
additional type quantifier and thus disturbing our stratification. 

Different restrictions of system F based on hnear logic, and characterizing 
also the elementary recursive functions, as well as polynomial time, were 
introduced by Girard [£] and further elaborated by several authors j2,4j- 

2 Definitions 

The elementary recursive functions are a natural subclass of the primitive 
recursive functions that was first defined by Kalmar 8j. A function iix,y) 
is a bounded sum (a bounded product), if it is defined from g(x,y) by 

x-1 x-1 

f(x,-y) = ^ g(i,y) resp. f (x,-y) = ]^ g(i,y) ^ . 

i=0 i=0 

The elementary recursive functions are the least class of number-theoretic 
functions that contains the constant 0, all projections, successor, addition, 
modified subtraction x—y := max(x — y,0), multiplication and is closed 
under composition and bounded sums and products. 

It is well-known that the elementary recursive functions coincide with 
the third level (£3 of the Grzegorczyk hierarchy |2j, and that they coincide 
as well with the functions computable in time or space bounded by an 
elementary recursive function (see e.g. P]). 

The functions An.2k(Ti) for k G N are inductively defined as follows: 
2o(n) = n and 2i^+i(rL) = 2'^^^^\ For every fixed k, this function is el- 
ementary recursive, but the binary function AkrL.2ic(n) is not: Ak.2ic(l) 
eventually majorizes every elementary recursive function. 

The system. We now give a formal definition of our system, by means 
of a type assignment calculus. So terms are only the terms of the untyped 
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lambda calculus with pairs, i.e., given by the grammar 

T, s ::= X I rs I Ax . T I (r, s) | rL | rR , 

where x ranges over an infinite set of variables. We define types of level 
n for a natural number n. However, we will use only the types of level at 
most 2. Our type variables also come in different levels; let an range over 
variables of level n. 

Definition. The types of level n and the flat types x'q of level are 
inductively given by the following grammar: 

Tn := an I Tn ^ Tru I Tn X Tn I Va^.Tic 

To := ao I To X Tq 
where k < n and FV(tic) C {ak}. 

Note that this notion of the level of a type differs from the notion com- 
monly used in the literature, so it should more correctly be called modified 
level. However, since the usual notion is not used in the present work, for 
sake of brevity we just use the term level for the modified notion. 

Also note that with respect to our notion of the level of a type, there 
are no closed types of level 0. 



Contexts and Judgments. A context F is a set of pairs x : t of variables 

and types, where the variables occurring in a context have to be distinct. A 
typing judgment is of the form F h r : t and expresses that r has type t in 
the context F. The typing rules are: 

(var) — if X : T occurs in F 

F h X : T 

r,x:a\-r:p Fl-r:a— >p Fl-s:a 
' FhAx.r:a^ p ' F h rs : p 

Ft-r:p Fhs:a 



(XI) 



F h (r, s) : p X CT 



1 Fhriax p 2. Fhriax p 

'""^ ' FhrL:a ^ ' F h rR : p 

FhriTk 
F h r : Vcxic.Tic 

F h r : Vaic.n 
F h r : Tic[aic := 



(VI) if oc^ i FV(F) 



(VE^) rhr:V(Xic.T„ ^ ^ ^ ^^^^^^ 
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[VE^J — where Oq is fiat type. 

r h r :To[ao := cr^] 

We will tacitly use the obvious fact that V \- r :r holds only if all the free 
variables of r are assigned a type in V. The rules are formulated in such a 
way that weakening is admissible. By a simple induction on the derivation 
one verifies: 

Proposition 1 (Weakening). // F C F' and F K r : t, then F' h r : t. 

Reductions. Our system is equipped with the usual reductions of lambda 
calculus with pairs. Let be the reflexive and transitive closure of the 
reduction given by the compatible closure of the conversions below, i.e., by 
allowing apphcation of these conversions to arbitrary subterms. 

(Ax . r)s 1— > r[x := s] 
(r, s)L H-) r 
(r, s)R H-> s . 

We denote the induced congruence relation by =13, i.e., =13 is the symmetric 
and transitive closure of — ^. For technical reasons, in some proofs we will 
also need the notion of (3ri-equality, denoted by =p,r\. It is defined hke =(3, 
but based on the conversions above together with ri-conversion 

Ax . tx I— > t 

with the proviso that x is not free in t. 

It is easily verified that our reductions preserve typing. 

Proposition 2 (Subject Reduction). If V h r : t and r r' , then 
Fhr':T. 

Statement of the main result. For every type t, we define the type 

T* := (t ^ t) ^ (t ^ t) . 

For a natural number n, the Church numeral n is Afx . f "^x, it can have 
type T* for every t. The types of natural numbers are Nato := Vao-oco* and 
Natl '■= Vai.ai*. It can be shown that the only closed normal inhabitants 
of the types Natt are the Church numerals, and the identity combinator 
id := Ax . X, which is equivalent to the numeral 1 under rj-conversion. 

A function f : N*^ — > N is representable, if there is a term tf such that 
h tf : Nat';' -> Nato and for all u G N"^, it holds that tfU =,3 f(n^. We shall 
prove below, as Corollary [l9l that the representable functions are exactly 
the elementary recursive functions. 
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Notation. As usual, lists of notations for terms, numbers etc. that only 
differ in successive indices are denoted by leaving out the indices and putting 
an arrow over the notation. It is usually obvious where to add the missing 
indices, otherwise we add dots wherever an index is left out. We use one 
dot if the index runs with the innermost arrow, two dots if the index runs 
with the next innermost arrow etc., so that e.g. the expression 

> 

stands for a sequence of the form 

tlUl ,1 . . . ni ,ici , • • • , trUr,! . . . Ur.kr • 



3 Completeness 

In this section we show one direction of our claim, namely we show that 
every elementary recursive function can be represented by a term. To start, 
it is easy to check that the usual basic arithmetic functions can have the 
following types 

sue := Ansz.s(nsz) : t* — > t* 

add := Amnsz.ms(Tvsz) : t* — > t* — > t* 

mult := Amns . m(ns) : t* ^ t* ^ t* 

for every t. We use these to program a downward typecast, that is a function 

X := An.nsucO : t** t* 

with the property in =|3 n. Note that X also has the type Nato* Nato, 
since sue can be typed as Nato ^ Nato by instantiating the argument n:Nato 
as n : ao*- Note moreover that add and mult, by a similar argument, can 
also have type Nato — ^ Nato Nato. 

The predecessor can be implemented of type Nato ^ Nato as follows: 
in the context where we have variables s : ao ^ ao and z : ocq, as abstract 
successor and zero, we get the term P := Ap . (s(pL),pL) of type (ao x ao) 
(ao X ao), such that the n-fold iteration of P applied to (z, z) reduces to 
(s"^z, s"^^^z), for every n > 0. Thus the argument n: Nato is instantiated as 
n: (ao x ao)* by the rule (VE^), and we get 

n : Nato l~ Asz . nP(z, z) R : ao* 

and an application of (VI) and (— > I) yields that the predecessor pred := 
Ansz.nP(z,z)R is typeable as pred : Nato ^ Nato. 
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We obtain subtraction sub := Amn . n pred m by iterating the predeces- 
sor, of type sub : Nato Nato* Nato- Obviously, for m,u G N we have 
sub mu =|3^ m— u . 

Testing for zero can also be easily programmed as xo '■= Anxy . n(Az .y)x, 
which has type xo '■ Nato — > ocq — > ocq — > ac and the operational seman- 
tics if n = then x else y, i.e., with the properties xoOxy =^ x and 
Xp n + 1 x-y =|3 y. To obtain the typing, we instantiate the input n: Nato 
as n : ao* by (VE^). 

Next we define a function Tq such that for natural numbers n and m, 
we have ToOm =(3^1 Hk, and Tp n + 1 m =^ry ra + 1 , as 

To := Anxszs'z' . xo n(s(xsz)s'z') (xszs'z') 

The term To can have the type Nato Nato* Nato*, which is verified as 
follows: in the context x:Nato*, s:Nato Nato, 2;:Nato we obtain the terms 
xsz and s(xsz) of type Nato. These are instantiated with the rule (VE^) as 
being of type ao*, and with s' : ao — ^ c^o and z' : ocq we get s(xsz)s'z' : ao 
and xszs'z' : ao. Therefore we obtain 

r h As'z' . Xo Ti(s(xsz)s'z') (xszs'z') : ao* , 

where F is the context n : Nato,x : Nato*,s : Nato ^ Nato,z : Nato, and an 
apphcation of (VI) followed by several (^I) gives the claimed typing of To. 
It is easily verified by straightforward calculations that To has the claimed 
operational behaviour. 

We use To to implement an upward typecast that works with the aid of a 
large parameter of suitable type, i.e., a term t:Nato** Nato ^ Nato* ''^ith 
the property that TlHIl =Pti H as long as m > n. This can be implemented 
as 

t := Amn.m(Ax.To(subnx)x)0 , 
i.e., the function Ax.To(subrLx)x, which operationally behaves as 

if X < n then x + 1 else x, 

is iterated m times, starting at 0, to the effect that in the first n iterations, 
the value is increased by 1 , and thereafter the value is n, and thus remains 
the same. 

Now by use of the typecast, a more useful type-homogeneous subtraction, 
but again with the aid of a large parameter, can be defined as 

sub := Arank.Tra(sub(Xu)k) : Nato** ^ Nato* ^ Nato* ^ Nato* , 

with the property that sub rank n— k as long as ra > n— k. 



6 



Definition. For a type r, let t'°' := t, and t(^+''' := (t'^')*. 

To iterate the above construction, assume we have a subtraction 

sTTb^: Nato""+^' ^ Nato*""' ^ Nato""' ^ Nato""' , 

and note that Tq can have type Nato'"^' -> Nato*^+^' -> Nato*^+^' for every 
k, since xo can have type Nato''^+^' Nato''^' -> Nato''^' -> Nato''^' (in fact, 
Xo can have any type of the form t* — > t — > t — > t). Thus we can program 
an upward typecast 

tic := Amn.m(Ax.To(subk(J,m)n(Xx))x)0 

of type tk^ Nato'^+^' -> Nato'"^' -> Nato''^^^', which again can be used to 
define a subtraction 

subk+i := Amnin2.TkTTL(subk(J,m)(ini)(iu2)) 

of type Natof''+^' ^ Nato<'^+^' ^ Natof''+^' ^ Natof''+^'. Thus inductively 
we get subtractions subk and upward typecasts fk for every k. We also 
define iterated upward typecasts Tk : Nato"^+^+^' ^ Nato"^' ^ Nato"^+*' by 

Tk := Amn . n and Tk^^ := Amn . tk+« m(Tk(i Tn)n) . 

Prom now on we will omit the index k in tki Tk subk when it can be 
inferred from the context. We are ready to state our main lemma: 

Lemma 3. For every elementary recursive function f : N"^ — ) N and 
k G N, there are a closed term t and £,r G N and a list ff of types, where 
each r\ is of the form r\ ::= Nato'^' I il* i (il ^)* > such that 

ht:Ti ^ ^ Nato""' 

and for all n G N^, tLn =^-r^ f (n) as long as L> 2r[Y_ 'S)- 

Note that we plug in the same numeral L for all the arguments of the 
types ff. Also note that only simple types over Nato are used as these types ff, 
and this is the only property used in the apphcation and proof. A statement 
similar to this lemma was offered by Simmons as a characterization of 
the Kalmar elementary recursive functions. 

Before we prove the main lemma, we shall first use it to derive the 
main theorem of this section, the represent ability of all elementary recursive 
functions: 

Theorem 4. For every elementary recursive function f : — > N there 
is a closed term T : Nat^ — > Nato such that In =|3t^ f (ft) for all n G N^. 
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Proof. Prom the lemma for f and k = 1 , we obtain a term t and £, r.ff with 
the properties stated there. As we can always move to bigger values of r, 
we may without loss of generality assume r to be at least 2 and even. 

Let s := r/2. For each type rit, instantiate each input n: Nati as n:r\i^^\ 
which is possible by (VE^) since rii'^' is a closed type of level 1. Now use 
add :r|i^*' Tii'^^ rii^*' to compute S := ^ n of type rji'^'. Next form the 
term N := (. . . ((S2)2) . . .2), with r occurrences of the numeral 2, of type 

Tlx- 

Instantiate the inputs ft again by (VE^ ) at the closed, level 1 type Nato'^\ 
and form T := An . |(t N ft). As for every input ft, N evaluates to a numeral L 
with L > IriY. the term T has the required properties, by the lemma. □ 

Corollary 5. For every elementary recursive function f : — > N there 
is a closed term T : Nat^ — > Nato such that Tn f (ft) for all n G N"^. 

Proof. Take Ansz.Tnsz for the term T obtained from the theorem. For 
every n consider the (3-normal of (Aftsz . Tftszjn, which is a closed, |3-normal 
term of type N, starting with two abstractions, hence a numeral. So it has 
to be f(n), for otherwise two distinct numeral would be |3ri-equal, which by 
the well known confluence of lambda calculus with pairs is not the case. □ 

Proof of the Lemma. We have produced terms representing the base func- 
tions successor, addition, subtraction and multiplication above. For S, + 
and X , we can set £ = r = and ff empty for any k. 

Concerning subtraction — , for k = we use the term ArLk.sub(J,n)k 
and set r = 0, £ = 1 and ff empty, and for k > 1 we use sub^, and we set 
i = r = and ff contains the single type Nato^'''''^^ 

In the following, note that by the properties of X, whenever we have a 
term t of type Nato''^'''^^ we can obtain a term X^t with the same value of 
type Nato"^'. ^ 

For closure under composition, let f(n) = g(H,(n) ) and k be given. By 
the induction hypothesis for g and k, we have a term tg, numbers ig and tg 
and a hst ff^ of types such that the claim of the lemma holds for these. 

Also, the induction hypothesis for each h| and k + ^g yields terms ti and 
h,Ti G N and types r\.^i, such that the claim holds for these. 

Let £ := £g + maxi£i. Since the functions hi are elementary recur- 
sive, Y. l^dC'Ti) is also elementary, and therefore there is an s G N such that 
^^Kv(u) < 2s(^u). For variables v and w7^, which we give the types ff 
and r\.^i, respectively, we set 

^ =r^ 

t := Av w ft . tg V (t. w7/ {i^^^B^^- n.) ) 
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} 

such that t has type ff ^ ff ^ Nato'^^^^' Nato^^\ By the induction 
hypothesis, for r := max(rg + s,f) we have tLLn =^-r[ f(Tv) ^is long as 
L>2,(^u). 

For closure under bounded sums, let f(n, m) = ^i^o^ gl'S.i) and k be 
given. By the induction hypothesis for g and k + 1 , we have a term tg, 
numbers € and r and a hst ff of types such that the claim of the lemma 
holds. Define 

Xo := Anxy sz . xo (^sz) [ysz) 

of type (Nato''^+^+^')^ -> Nato*^+^+^', with the same operational semantics 
as Xo, i-e., for i,j G N we have XoOi) =e>r] i and XoIL±Iii =Pti )■ For 
variables v: Nato''''''^'''^^ w of the types ff and n.m of type Nato^'^'''^'''^^ we 
have 

T := Axy .xo (subvm'y)x(add x(t* v (tg wfiy))) , 

of type Nato'^+'+^' ^ Nato<'^+'+^) ^ Nato'^+'+^'. 

As long as a sufficiently large numeral L is substituted for the variables 
V and w, T operationally behaves as 

if y < m then x + g (ft, y ) else x. 

More precisely, L has to be large enough so that all values of g(n, I) are 
computed correctly, that is, L > Zrl^n + m], and we need L > g(n,i) for 
the typecast to work properly. Next, we define 

P:=Ap.(T(pL) (pR),suc(pR)) 

of type (Nato'^+^+^' x Nato(''+*+^') ^ (Natot^+^+^' x Natot''+^+^'). When 
this term, having the operational semantics 

, .> I (s + g(Tt,i),-L+ 1) ifi<m 
[ (s,i + 1) otherwise, 

is iterated starting from the pair (0, 0), by use of a sufiiciently large numeral 
of type (Nato"'+^+^' x Nato"'+*+^')*, the values g(n,l) for i = 0, . . . , m - 1 
are summed up in the left component. Thus to represent f, we define the 
term 

t := Au V w ft m . (u P (0, 0) L) 

of type 

(Nato('^+'+^^ X Nato"^+'+^')* ^ Nato"^+^+2' ^ ri ^ Nat^^+^+i'' Nato'^' 

By the induction hypothesis and the construction, we get the property that 
tLLL;^IO: =|3ti f(Tt,TrL) as long as L is sufficiently large. To be more precise. 
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L needs to satisfy the requirements above for T to be computed correctly, 
and L > m in order to complete the summation. Therefore, let s be such 
that for every m and i < m we have g(n,i) < 2s(^u + m), which exists 
since g is elementary recursive, and let r' := max(r, s). Then all conditions 
on L are satisfied if L > 2^/(^ ft + m). 

Closure under bounded products is shown in the same way, only with 
add in the definition of T replaced by mult, and the iteration of P is started 



4 Soundness 

In this section we show the other direction of our claim, that is, we show 
that every term of type Nati Nato denotes a function on Church numerals 
computable in elementary space. The main idea is to use the elementary 
bound for traditional cut-ehmination in prepositional logic. In this section 
we will deal only with types of level at most 1 , so let t, p, a range over those 
types within this section. Note that every instantiation of Nati is a type 
of level 1 . Types of level and 1 are almost simple types (corresponding 
to propositional logic) with the exception of quantification of (Xq. These 
quantifiers however, can only be instantiated with fiat types of the form 
ao X . . . X cxq. Hence we can get a notion of cut-rank that is invariant under 
generahzation and instantiation of level 0, if we ignore pairs. Fortunately 
we can do so, as the reduction of a pair-redex reduces the size of the term 
and hence does not do any harm. So we define the rank rk(T) of a type t 
inductively as follows: 



We inductively define a relation V r:T saying that F H r:T can be derived 
by a typing derivation of height m and cut-rank k: 



at (1,0). 



□ 



rk(a) 







rk(p X a) 
rk(p a) 
rk(Va.p) 



max(rk(p),rk(a)) 
max(rk(p) + l,rk(a)) 
rk(p) 



(var) 



if X : T occurs in F and m, k > 



X : T 



(^I) 



F, X : a Hj^ r : p 



Fh]^+i Ax.r:CT^ p 




r : a — > p 




s : CT 



if rk(a) < k 




rs : p 
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(xl) 



rh;^r:p rh]^ s:g 
r h^" (r, s) : p X a 



(xEM ^^^-T and analogous for (xE^) 

r |_Ta _ . _ 

r l-J^ r : Va.T 



(VE^) -rp — ^ ^ where a' is a fiat type. 

r l-j^ r:T[a := a'] 



wiiere m" := max(m, m') + 1 . As tiie ruies are preciseiy tiiose of our typing 
judgment for types of level at most 1, we have the following property for 
typing derivations of level at most 1 : if F h r : t then there are m, k such 
that r h]^ r : T. On the other hand, the following property obviously holds 
and motivates our interest in this notion: 

r h]J^ r : T imphes |r| < 1^ 

The rules are formulated in such a way that weakening is admissible. 

Proposition 6 (Weakening). // V l-j^r:T, V D F, m' > m, k' > k then 
V h]j' r:T. 

The next proposition, which can be shown by a trivial induction on Tq 
or T, respectively, explains formally why we can allow instantiations with 
fiat types of level without any harm: the rank is not altered! 

Proposition 7. For a flat type Tq of level we have rk(TQ) = and 
rk(T[ao := t^]) = rk(T). 

Knowing that the rank of a type is not altered by substituting in a fiat 
type, the cut-rank, being a rank, is not altered as well, hence an induction 
on r hjj^ t : T shows: 

Proposition 8. // P hj^ t : t and Tq is a flat type of level then 

r[ao:= T^] H^t:T[ao := r'^] 

Using this proposition a simple induction on m shows that a derivation 
r t : T can be transformed in such a way that the rule (VI) is never 
followed by (VE^). So from now on we tacitly assume all derivations to be 
free from those (VI)-(VE-^)-redexes, as for example in the proof of the next 
proposition, which then is a simple analysis of the last rule of the derivation. 
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Proposition 9. // T h]^ (r, s)L : p then T hj^ r : p and if V (r, s)R : a 
i/ien r s : a. 

As usual, induction on the first derivation shows that cuts can be per- 
formed at the cost of summing up heights. 

Lemma 10. // r,x : p h]^ s : a and T hj^' r : p then T \-^+"^' s[x := r] : a. 

In order to be able to reduce the cut rank, we first show an "inversion" - 
lemma, that is, we show that under certain conditions terms of arrow-type 
can be brought into abstraction form. 

Lemma 11 (Inversion). //rk(r) < k and V t:p — > a where rk{p) > k, 
then there are l' and x with t =|3 Ax . t' such that F, x : p hj^ t' : a. 

Proof. Induction on m and case distinction according to t. 

The case t = xs is impossible, since x would have to occur in P and hence 
rk(r) > k. The case t = (r, s)t is also impossible since t has to be empty, as 
we assume t to be free of pair-redexes, and therefore t would have to have 
a pair type. 

So the only remaining case is that t is of the form t = (Ay . r)t. The 
claim is trivial if t is empty. So without loss of generality we might assume 
t to be t = (Ay .r)ss, with y not free in s,s. The abstraction Ay .r must 
have been introduced from a derivation r,y : t r : f with rk(T) < k for 
otherwise the cut would not have been allowed. Hence, for some m' with 
m' + 2 < m we get 

r,y : T h^' rs : p ^ a and T h]^'+'' s : t 

Hence by the induction hypothesis we get a new variable x and a term 
t' such that rs =^ Ax.t' and r,y :t, x: p h]^ t' : a. Prom that we con- 
clude r,x : p "'"■^ (Ay . t')s : a and note Ax. (Ay . t')s =p Ax .t'[y := s] = 
(Ax.t')[y := s] =p (rs)[y := s] = r[y := s]s =p (Ay .r)ss = t, hence the 
claim. □ 

Lemma 12 (Cut- rank reduction). IfV hj^^ t:p, rk(r) < k, and rk(p) < 
k + 1 then V h^™ t' : p for some t' =p t. 

Proof. Induction on m. The only interesting cases are (^ I) and (^ E). 
Concerning (^ I) we are in the situation that V l~J^^ Ax.r : t was 
concluded from F, x: a h]^^ r : t. With p = ct — > t we have rk(r] < k, 
rk(a) < rk(p) < k + 1 and rk(T) < rk(p) < k + 1. Hence an application 
of the induction hypothesis yields F, x : a r' : t from which we conclude 
F Ax . r' : a ^ T which, by weakening, suffices, since 2^ + 1 < 2"^+^ . 
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Concerning the case (— >E) we are in the situation that V ts : p was 
concluded from F t : a — > p and F h]^^ s : a. The only case that is not 
immediate by the induction hypothesis is if rk(cr) = k. Then the induction 
hypothesis gives us F t' : a — > p for some t' =3 t. By our assumption 
rk(r) < k, hence by inversion we get F, x : a \-^ t" : p for some new x and 
t" such that Ax.t" =|3 t' =13 t. Also by the induction hypothesis we get 
F s : a. By Lemma [TUl we get F \-^+^'^ t"[x := s] : p which yields the 
claim since t"[x := s] =^ (Ax.t")s =p ts. □ 

Corollary 13. // hj^i t : a* then t' : a* for some t' =,3 t. 

Proposition 14. // t normal and F h t : Tq for some F with rk(F) < 1 
then t is X-free. 

Proof. Inspection of the typing rules yields that the only rule introducing 
a A is (—>!), which creates an arrow-type. In order for the whole term to be 
of arrow- free type, the rule (— >E] has to be used, either creating a redex or 
requiring a variable of rank at least 2. □ 

Definition. A term t is quasinormal, if every redex in t is of the form 
(r, s) L or (r, s) R with X-free r and s 

We remark the trivial property that the normal form of a quasinormal 
term t can be computed in space bound by the length of t. We also note 
that Proposition [HI also holds for quasinormal terms, since the only types 
discarded by a redex are those of terms which are A-free by definition. More- 
over, a simple induction on t shows: 

Proposition 15. // t is quasinormal and s is X-free and quasinormal 
then t[x := s] is quasinormal. 

Prom that proposition. Proposition [lH and Lemma [lOl we immediately 

get: 

Corollary 16. // F,x : a' r : p and F hy^' s : a' and r and s are quasi- 
normal then F |-^|^+"^ r[x := s] : p and r[x := s] is quasinormal. 

This corollary allows us to show our last ingredient for the soundness 
theorem: we can transform a term with cut-rank 1 into a quasinormal one 
at exponential cost. 

Lemma 17. // F H^^ t : t then F H^" t' : t for some quasinormal t' with 
t'=pt. 
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Proof. Induction on m. If t is not quasinormal, it has a subterm of the 
form (Ax . r)s. Then, for some A, cr, p and k we have A, x : cr r : p, and 
A s : 0- from which A V-\-^^ (Ax . r)s : p was concluded. Since the cut was 
allowed, we have rk(a) < 1. Hence, by the induction hypotheses we get a 
quasinormal s' =p s such that A s' : a. Also by induction hypothesis 

we get a quasinormal r' =|3 r such that A, x: a hf r' : p. By Corollary fl6l 
we get A 1-2'' +2""+^ := s'] : p and r'[x := s'] is quasinormal, hence the 
claim. □ 

We are now ready to show that every representable function is elemen- 
tary recursive. To keep the notation simple, we only state and prove this for 
unary functions, but the generahzation to higher arities is straightforward. 

Theorem 18. // h t:Nati — ) Nato thent denotes an elementary function 
on Church numerals. 

Proof. We have x : Nati h tx : Nato. Since all our terms are also typeable 
in usual system F, hence strongly normalizing, and since subject reduction 
holds, we can find (in maybe long time, which however is independent of the 
input) a normal term t' =^ tx and x : Nati h t' : Nato. Since t' is normal, 
inspection of the typing rules yields that every occurrence of x must be 
within some context, that is, of the form 

1 x:Nati hx:Nati 
^ ' x:Natihx:e 

for some level 1 type without (free) variable ai . Let c be the maximum 
of the ranks of all the £,'s occurring in that derivation and k the number 
of occurrences of such £,'s (note that c and k are still independent of the 
input). 

Now, let a natural number n be given. Replacing all x:£,* by derivations 
of n : £,* yields a term t" =,3 tn and a derivation ^|^ (^+2)+2|t'l ^// . ^^^^ 
The bound on the height of the derivation is obtained as follows: there are 
k derivations of height n + 2 yielding n : £,* and these are plugged into the 
derivation of t' : Nato. In the latter derivation there is at most one inference 
for each symbol in t' followed possible by a single quantifier inference. 

Using Corollary [El we obtain a term t =3 t" =^ tn such that 
l_2c+i (k(n+2)+2|t I) - . |\|atQ Hence Lemma [T71 and the remark on computing 
the normal form of a quasinormal term provides means to calculate the nor- 
mal form of tn in elementary space. (Note that all the intermediate terms 
are also of elementary bounded size.) □ 

Together with Theorem |4| we obtain the claimed characterization. 
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Corollary 19. The representable functions are precisely the elementary 
recursive functions. 

Note that our characterization does not mean that the normahzation 
procedure for terms typeable in our system is elementary recursive. The 
following easy counterexample shows that this is indeed not the case: the 
terms (. . . ((2 2)2) . . . 2) with n occurrences of 2 are of size 0(n), but their 
normal forms are the numerals 2r^{^] of size 0(2^(1 )). Thus the normaliza- 
tion function has super- elementary growth. 
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